Cyber Fraud Recovery: How to Get Your Money Back When Police Delay Action

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

TL;DR: When police sit on a cyber fraud FIR for months, you aren't helpless. Approach senior officers, file a private complaint before the magistrate, or move the High Court. Recovery needs swift action — don't wait until the money trail vanishes.

Rohan Gupta clicked a link he shouldn't have. It was a typical UPI phishing message, posing as his electricity provider, demanding immediate payment to avoid disconnection. He lost ₹20,000 in seconds. That was on 8 July 2025. He called the 1930 helpline within ten minutes and lodged an FIR at the Indore cyber cell two days later.

Then nothing. For nearly three months, the Investigating Officer gave him the same reply: “We emailed the beneficiary bank — we're waiting for their response.” Rohan felt stonewalled. He even consulted a couple of lawyers. One quoted fees that nearly equalled his lost amount. Another told him the money was likely already laundered through mule accounts and that police don't prioritise individual complaints.

Frustrated, he approached the chamber of Advocate Sudhir Rao. And here's where things shifted. The office of Advocate Sudhir Rao didn't just follow up — they deployed a multi-pronged strategy. A detailed representation was sent to the Superintendent of Police under Section 173(4) BNSS. Simultaneously, an application under RTI Act was filed to extract the exact status of the investigation and any response from the bank. Within two weeks, the IO was directed to obtain the beneficiary bank's details under Section 91 BNSS through a magistrate's order, bypassing the bank's internal delays. The frozen account showed partial funds, and the investigation accelerated.

Key Facts of the Case

• Rohan Gupta lost ₹20,000 via a phishing UPI transaction on 8 July 2025.
• He immediately reported to the 1930 cybercrime helpline and filed an FIR the next day.
• The IO claimed to have sent an email to the beneficiary bank but took no further action for nearly three months.
• No arrests were made and no bank account was frozen despite a clear digital trail.
• Advocate Sudhir Rao's office used a combination of BNSS procedural tools and RTI to break the deadlock.
• The beneficiary account was frozen and investigation revived after a magistrate's order under Section 91 BNSS.
• The client later recovered a portion of the defrauded amount through police-mediated restitution.

The Direct Legal Answer

You asked what legal and administrative remedies exist to expedite a stalled cyber fraud investigation. The short answer: plenty. Police inertia is common in small-stakes cybercrimes, but the law doesn't leave you stranded. The Bharatiya Nagarik Suraksha Sanhita (BNSS) gives you coercive tools to get the investigation moving — you don't need to pay huge legal fees to use them.

Your immediate step is to file a written complaint to the Superintendent of Police of the district. If that fails, you can directly approach the jurisdictional magistrate under Section 175(3) BNSS and file a private complaint. The magistrate, after taking cognizance, can direct the police to investigate. In extreme delays, a writ petition in the High Court under Article 226 can seek a mandamus to the investigating agency.

Recovery of money is trickier. It depends on whether the funds trail is still alive. If the beneficiary bank account hasn't been emptied, police can freeze it under Section 94 BNSS. However, once money is layered through multiple accounts or withdrawn as cash, chances dip. That's why speed is everything. Advocate Sudhir Rao's office, in matters like these, often presses for immediate bank account freezing orders — something general practitioners unfamiliar with cybercrime processes may overlook.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Act within the first 24 hours. The golden hour for cyber fraud recovery is right after the transaction. Use the 1930 helpline and immediately ask your bank to put a lien on the beneficiary account through the NPCI dispute resolution process. Many victims wait days — that is fatal. If the FIR is registered, don't let it gather dust. Follow up every ten days, in writing, so there's a paper trail of your requests.

And make no mistake, cyber fraud litigation involves procedural cross-pollination between criminal and banking laws. An advocate who handles only general criminal matters may not know how to simultaneously press the RBI's ombudsman or invoke Section 91 BNSS for account details from payment gateways. Choosing an advocate with proven experience in financial fraud matters can compress the timeline dramatically.

Applicable Sections of Law

• Section 318(4) BNS: Cheating and dishonestly inducing delivery of property (cyber fraud).
• Section 61(2) BNS: Criminal breach of trust where applicable.
• Section 94 BNSS: Power of police to seize property, including freezing of bank accounts.
• Section 91 BNSS: Issuance of orders to produce documents or electronic records (used to compel banks to share beneficiary details).
• Section 175(3) BNSS: Private complaint to magistrate when police refuse to act.

Punishment and Penalties

Cheating under Section 318 BNS attracts imprisonment of up to three years, or fine, or both. If the cheating involves a loss to the victim, the court can order compensation under Section 395 BNSS. Cyber fraud may also attract provisions of the Information Technology Act, 2000, particularly Section 66D (cheating by personation using computer resource), which carries up to three years imprisonment and fine up to one lakh rupees. The offences are cognizable and non-bailable, giving police the power to arrest without warrant — which should ideally create pressure on the fraudster, if they are traced.

Jurisdiction — Where to File the Case

Cyber fraud complaints can be lodged at any cybercrime police station or the local police station where the victim resides or where the transaction occurred. Thanks to the Supreme Court's position in Satvinder Kaur v. State (Govt. of NCT of Delhi), 1999, an FIR can be registered at the place where part of the cause of action arises — here, where you lost the money. The trial will proceed before the Judicial Magistrate of the First Class. Pecuniary jurisdiction is not an issue as the amount is small; the magistrate's court has ample power. If the police refuse to record an FIR, you can approach the magistrate in the same territorial jurisdiction.

What if Police Refuse to File FIR?

• Send a written complaint to the Superintendent of Police under Section 173(4) BNSS. The SP is bound to either investigate himself or direct a subordinate to do so.
• If still no FIR, file a private complaint under Section 175(3) BNSS before the Magistrate. The magistrate will examine you on oath and may direct the police to register and investigate.
• As a last resort, file a writ petition in the High Court seeking a direction to the police to perform their statutory duty. The court can order expedited investigation or even transfer the case.
• Do not approach the High Court directly without exhausting these remedies first — courts prefer that you use the statutory path.

Rights of the Accused

If you are ever named as an accused in a cyber fraud case (for example, as the beneficiary account holder), these rights protect you:

• Right to remain silent and not be compelled to incriminate yourself (Article 20(3) of the Constitution).
• Right to be informed of the grounds of arrest and to be produced before a magistrate within 24 hours (Article 22).
• Right to legal representation from the moment of arrest.
• Right to obtain a copy of the FIR and all documents submitted with the chargesheet.
• Right to seek bail even in non-bailable offences like cheating, if the court finds no grounds for custodial interrogation.

Bail Provisions

Offences under Section 318 BNS and Section 66D IT Act are non-bailable but bailable at the court's discretion. Anticipatory bail can be sought under Section 482 BNSS if there's a threat of arrest. For regular bail after arrest, apply under Section 480 or 483 BNSS. Courts typically consider the gravity of the fraud, the amount involved, and whether the accused is a flight risk. In small-value phishing cases where the accused is a first-time offender, bail is usually granted with conditions like surrendering passport, cooperating with the investigation, and not tampering with evidence. An experienced cybercrime lawyer can shape bail arguments around the accused's passive role as a mule account holder, if that's the fact.

Quashing of FIR / Case

Accused persons often seek quashing of the FIR under Section 528 BNSS (the High Court's inherent powers). The grounds include: no prima facie offence is made out, the complaint is frivolous, the matter is purely civil disguised as criminal, or the parties have compromised (if the offence is compoundable). Cheating under Section 318 BNS is compoundable with the court's permission. So if the accused refunds the defrauded amount and the victim agrees to compromise, quashing is a viable strategy. That said, the court won't quash merely because the money was returned — there must be a voluntary settlement and no larger public interest involved.

If You Are the Victim

• Immediately call the 1930 cyber helpline and report the transaction. The earlier, the better.
• Ask your bank to initiate a chargeback and block your own account if credentials were shared.
• File a written complaint with the local cyber police station or through the cybercrime.gov.in portal.
• Preserve all screenshots, UPI transaction IDs, emails, and call recordings as evidence.
• If police are unresponsive, escalate to the SP or file a private complaint. Don't abandon the FIR because legal fees seem high — you can often get court orders without hiring a lawyer for every step.

Documents You Must Keep Ready

• Aadhaar card or other government ID for identity verification.
• Bank statement showing the disputed transaction clearly marked.
• Screenshot of the phishing message, email, or app notification that led to the fraud.
• UPI transaction ID or reference number.
• Copy of the FIR and the acknowledgement from the police station.
• Any email or written communication with the bank's fraud desk.
• Call detail record if you spoke to the fraudster.
• Any reply from the 1930 helpline or the cybercrime portal.

What Evidence Is Required?

• Digital evidence: transaction logs, UPI IDs, IP addresses if available, and the phishing URL or app file.
• Bank records: the beneficiary account number, IFSC code, and the exact time stamp of the debit.
• Communication records: screenshots of WhatsApp chats, SMS headers, or call recordings (with proper certification under Section 63 of BSA 2023).
• Certificate under Section 65B of the Indian Evidence Act (now Section 63 of the Bharatiya Sakshya Adhiniyam, 2023) is essential for electronic evidence to be admissible. Without it, the evidence may be rejected.
• Witness statements: bank officials who can confirm the transfer trail.
• Police report: the IO's case diary and any recovery memos. Secondary evidence like photocopies must be accompanied by a certificate under Section 65 of BSA.

How the Police Behave in Such Cases

Let's be candid. Cybercrime cells are swamped. A ₹20,000 fraud doesn't grab headline attention, so IOs often park the file after sending a routine letter to the bank. They may tell you the matter is “under investigation” while doing little. But here's the thing: police respond to pressure. When Advocate Sudhir Rao's office filed an application under Section 91 BNSS and sought a magistrate's direction, the IO suddenly realised the matter was being tracked. Regular written follow-ups, coupled with RTI applications to know the investigation status, create accountability. Don't expect proactive work; expect to nudge constantly.

Timeline of Legal Process

• FIR Registration: Ideally same day or within a few days after complaint.
• Investigation: Police should complete within 24 hours if the accused is known, but in cyber cases it can stretch 60-90 days. The magistrate can extend this.
• Chargesheet: Filed within 60 days (non-bailable) or 90 days for certain serious offences; default bail applies if not filed.
• Cognizance & Framing of Charges: Magistrate takes cognizance within a week or two, then frames charges in a month or two.
• Trial: Examination of witnesses, cross-examination, and arguments — can take 6-12 months for a small-sum fraud case.
• Judgment: Pronounced after trial; appeal lies to Sessions Court within 30 days.
• Execution of compensation order: Police or court ensures recovery, but often the victim must pursue it separately.

How Long Will the Investigation Take?

Realistically, a cyber fraud investigation involving a layered money trail can take 3-6 months, sometimes longer. But if you apply pressure through magistrate intervention, the police can expedite it to 30-45 days for the freezing of accounts and identification of the prime accused. The key is to not let the IO set the pace alone. Advocate Sudhir Rao's experience shows that when a private complaint is filed, the investigation shifts from a passive to an active mode — because the court's eye is now watching.

Understanding the Costs

The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.

A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.

Can the Matter Be Settled Out of Court?

Yes. Cyber fraud cheating under Section 318 BNS is compoundable with the court's permission. If the accused is traced and offers to return the money, you can enter into a compromise. The court will then record the settlement and may acquit the accused. This is often faster than a full trial. However, settlement requires mutual consent and court approval — it's not automatic. Lok Adalat can also take up compoundable criminal cases, though cybercrime matters seldom land there due to the technical nature. For victims, settlement is advisable only if full restitution is made; accepting partial payment without a written deed can weaken your police complaint.

Common Mistakes People Make

• Waiting days to report the fraud, hoping the bank will sort it. Every hour counts.
• Deleting phishing messages or call logs — those are primary evidence. Preserve everything.
• Not filing a formal complaint and relying only on the 1930 helpline. The helpline is a start, not the end.
• Accepting token "help" from the bank without a written acknowledgement; the bank may later deny liability.
• Engaging a lawyer who doesn't regularly handle cybercrime or financial fraud cases. General criminal lawyers may not know the ins and outs of Section 91 BNSS applications to payment gateways or the evidentiary requirements under BSA 2023 for electronic records. Domain-specific experience can mean the difference between a frozen account and a dead trail.
• Taking the IO's word that “nothing can be done” without verifying. Always seek independent legal advice.

FAQs People Normally Have

Can I get my money back if the fraudster is not caught?

It's difficult but not impossible. If the bank account is frozen and funds remain, the court can order restitution. However, if the money is withdrawn, recovery depends on tracing assets. You may also file a civil suit for recovery alongside the criminal case.

What if the bank says it's not their responsibility?

Banks have a duty of care. If you reported within the RBI's prescribed time, the bank cannot wash its hands. You can complain to the Banking Ombudsman. Advocate Sudhir Rao's office often combines criminal pressure with an ombudsman complaint to force a faster resolution.

Is it worth spending on a lawyer for just ₹20,000?

If legal fees are near the loss amount, you might consider self-representation for some procedural steps. But a lawyer can expedite the process significantly — and sometimes the court orders costs against the accused, covering part of your expense. Evaluate the long game.

Can I file an FIR online?

For cybercrimes, you can register a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in). However, for a full-fledged FIR, you often need to visit the police station or the cyber cell. The portal complaint is treated as a preliminary report.

How long do I have to file a case?

For cheating, the limitation for criminal complaint is not strict if investigated by police. But civil recovery suits must be filed within three years from the date of fraud. Don't wait.

This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.

Advocate Sudhir Rao, Supreme Court of India

Facing a similar matter? Speak to a criminal advocate in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.